Static task
static1
Behavioral task
behavioral1
Sample
30a3eb1f5ca6048c49d2bbed7db8cc79_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30a3eb1f5ca6048c49d2bbed7db8cc79_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
30a3eb1f5ca6048c49d2bbed7db8cc79_JaffaCakes118
-
Size
26KB
-
MD5
30a3eb1f5ca6048c49d2bbed7db8cc79
-
SHA1
b6e010bf0f71b878bf8153fa126a2af9906574a8
-
SHA256
a548c0db5dfec95b1881c34eb8900382545397afed5718e1b4cc81660979a4ba
-
SHA512
048b1f5e574eeafd12710c54fd84926fc02643588a1471958f6a4212b2346e5dcc0353116b3f900084f9d1fbd3106109fc0b5c7aba76e244a0ea1baa9395be7a
-
SSDEEP
768:qSUcZgCS3IH6FHcFdAIl03GvHYVlQmJwhdkiHPeVhd:D2CSYHYcFWoaQ77kiHWVh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a3eb1f5ca6048c49d2bbed7db8cc79_JaffaCakes118
Files
-
30a3eb1f5ca6048c49d2bbed7db8cc79_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i2fec Size: 985B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE